Forward gpg-agent to container

2018-06-04 Thread Benjamin Kircher
Hello, I want to forward my host gpg-agent to an OCI container so that I can use a secret key that is available on the host to sign some packages inside the container. For this I create a bind mount of agent-extra-socket to /gpg-agent inside the container and start the container with $ dock

Re: Forward gpg-agent to container

2018-06-05 Thread Benjamin Kircher
> On 5. Jun 2018, at 08:56, Andrew Gallagher wrote: > >> >> On 4 Jun 2018, at 19:44, Benjamin Kircher wrote: >> >> Now inside the container I can see my socket >> >> # ls -l /gpg-agent >> srwx-- 1 root root 0 Jun 4 17:45 /gpg-agent &g

Re: Forward gpg-agent to container

2018-06-05 Thread Benjamin Kircher
> On 5. Jun 2018, at 10:54, Benjamin Kircher wrote: > > > >> On 5. Jun 2018, at 08:56, Andrew Gallagher wrote: >> >>> >>> On 4 Jun 2018, at 19:44, Benjamin Kircher >>> wrote: >>> >>> Now inside the container I can se

Re: Forward gpg-agent to container

2018-06-05 Thread Benjamin Kircher
Hello Werner, > On 5. Jun 2018, at 16:50, Werner Koch wrote: > > The envvar GPG_AGENT_INFO is not more supported since 2.1. I saw that, too. Andrew was mentioning GPG_AGENT_SOCK, not GPG_AGENT_INFO however. > I don't know how to best convey and share the socket using the file > system. I h

Re: Forward gpg-agent to container

2018-06-10 Thread Benjamin Kircher
> On 6. Jun 2018, at 02:27, Phil Pennock wrote: > > On 2018-06-05 at 17:17 -0400, Phil Pennock wrote: >> Shell 2: >> $ docker run -it --rm -v /var/run/pdp.gnupg:/root/.gnupg/S.gpg-agent.ssh >> alpine >> / # chmod 0700 /root/.gnupg && chown root:root /root/.gnupg/S.gpg-agent >> / # apk update

Re: Forward gpg-agent to container

2018-06-10 Thread Benjamin Kircher
> On 10. Jun 2018, at 18:05, Benjamin Kircher > wrote: > > > >> On 6. Jun 2018, at 02:27, Phil Pennock wrote: >> >> On 2018-06-05 at 17:17 -0400, Phil Pennock wrote: >>> Shell 2: >>> $ docker run -it --rm -v /var/run/pdp.gnupg:/root/.g